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ABSTRACT 

A  “proliferator”  seeks  to  complete  a  first  small  batch  of  fission  weapons  as  quickly  as  possible, 
while  an  “interdictor”  wishes  to  delay  that  completion  for  as  long  as  possible.  We  develop  and 
solve  a  max-min  model  that  identifies  resource-limited  interdiction  actions  that  maximally  delay 
completion  time  of  the  proliferator’ s  weapons  project,  given  that  the  proliferator  will  observe  any 
such  actions  and  adjust  his  plans  to  minimize  that  time.  The  model  incorporates  a  detailed 
project-management  (CPM)  submodel,  and  standard  optimization  software  solves  the  model  in  a 
few  minutes  on  a  personal  computer.  We  exploit  off-the-shelf  project- management  software  to 
manage  a  database,  control  the  optimization,  and  display  results.  Using  a  range  of  levels  for  inter¬ 
diction  effort,  we  analyze  a  published  case  study  that  models  three,  alternate,  uranium-enrichment 
technologies.  The  task  of  “cascade  loading”  appears  in  all  technologies  and  turns  out  to  be  an  in¬ 
herent  fragility  for  the  proliferator  at  all  levels  of  interdiction  effort.  Such  insights  enable  policy¬ 
makers  to  quantify  the  effects  of  interdiction  options  at  their  disposal,  be  they  diplomatic,  eco¬ 
nomic,  or  military. 


“From  this  session  interdict,  every  fowl  of  tyrant  wing.” 

Shakespeare,  The  Phoenix  and  the  Turtle 

Subject  classifications:  Government:  defense,  foreign  policy;  Military:  targeting;  Programming: 
integer,  linear;  Project  management:  CPM. 


1  INTRODUCTION 

Sixty  years  after  the  United  States  detonated  the  first  nuclear  weapon,  preventing 
the  proliferation  of  such  weapons  is  an  international  priority.  One  hundred  eighty-eight 
nations  have  ratified  the  1968  Treaty  on  the  Non-proliferation  of  Nuclear  Weapons 
(NPT),  more  than  any  other  international  arms-control  agreement  (UN  1968).  Despite 
this  fact,  some  nonsignatories,  and  even  some  signatories,  of  the  NPT  are  currently  de¬ 
veloping  nuclear  weapons,  or  are  suspected  of  developing  nuclear  weapons  covertly,  e.g., 
Iran,  Syria.  The  international  community  is  seeking  diplomatic,  economic  and  perhaps 
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Public  reporting  burden  for  the  collection  of  information  is  estimated  to  average  1  hour  per  response,  including  the  time  for  reviewing  instructions,  searching  existing  data  sources,  gathering  and 
maintaining  the  data  needed,  and  completing  and  reviewing  the  collection  of  information.  Send  comments  regarding  this  burden  estimate  or  any  other  aspect  of  this  collection  of  information, 
including  suggestions  for  reducing  this  burden,  to  Washington  Headquarters  Services,  Directorate  for  Information  Operations  and  Reports,  1215  Jefferson  Davis  Highway,  Suite  1204,  Arlington 
VA  22202-4302.  Respondents  should  be  aware  that  notwithstanding  any  other  provision  of  law,  no  person  shall  be  subject  to  a  penalty  for  failing  to  comply  with  a  collection  of  information  if  it 
does  not  display  a  currently  valid  0MB  control  number. 
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even  military  means  to  halt  or  at  least  hinder  such  development.  This  paper  describes  and 
demonstrates  a  new,  bilevel,  mathematical-programming  model  that  can  help  identify  the 
most  effective  means  to  accomplish  this  task. 

Production  of  nuclear  weapons  attracts  intense  global  scrutiny.  Because  of  this, 
and  because  of  current  NPT  safeguards  such  as  United-Nations-mandated,  on-demand 
compliance  inspections  of  civilian  power  reactors  (UN  1968,  Article  III),  any  new  proli- 
ferator  would  almost  certainly  run  a  covert  production  program.  Outside  discovery  of 
such  a  program,  or  project,  would  depend  on  intelligence-gathering  or  on  a  public  an¬ 
nouncement  by  the  proliferator  intended  to  intimidate  other  nations  into  political  or 
economic  concessions. 

Upon  learning  of  the  probable  existence  of  a  weapons  project,  we  would  likely 
seek  diplomatic  means  to  halt  it.  As  diplomacy  may  take  months  or  years  to  succeed,  we 
can  try  to  delay  the  project’s  completion  through  actions  less  severe  than  war  such  as 
embargoes  on  key  materials  and  economic  sanctions.  The  techniques  described  in  this 
paper  can  help  quantify  the  effects  that  such  actions  would  have  on  the  project.  They  al¬ 
so  apply  to  more  severe  actions,  such  as  the  sabotage  or  bombing  of  key  facilities,  should 
such  become  necessary. 

A  task  (also  called  an  “activity”  in  the  literature)  represents  a  well-defined  step  in 
a  project  that  duplicates  no  effort  with  any  other  step.  With  exceptions  that  arise  because 
of  “alternate  technologies,”  described  later,  all  tasks  that  define  a  project  must  be  com¬ 
pleted  to  complete  the  project.  For  example,  “acquire  metallurgical  furnace”  is  a 
necessary  step  in  building  an  enriched-uranium  weapon,  and  it  does  not  overlap  any  other 
tasks  like  “acquire  nitric  acid  storage  tank”  or  “fabricate  uranium  components”;  however. 
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completion  of  this  last  task  may  depend  on  the  prior  completion  of  “acquire  metallurgical 
furnace,”  while  the  completion  of  “acquire  nitric  acid  storage  tank”  may  not. 

An  interdiction  of  a  task  represents  an  action  that  delays  the  completion  of  that 
task  by  a  pre-specified  length  of  time.  For  example,  interdiction  of  the  “acquire  metal¬ 
lurgical  furnace”  task  could  be  achieved  through  an  international  agreement  that  hinders 
the  purchase  of  any  metallurgical  furnace  that  could  be  used  in  weapons  production;  it 
could  be  achieved  by  a  military  strike  that  destroys  that  furnace  so  that  another  must  be 
acquired;  or  it  could  be  achieved  through  subtle  acts  of  sabotage. 

Using  a  set  of  task  interdictions  that  is  limited  by  “interdiction  resources,”  such  as 
money,  labor,  and  diplomatic  good  will,  we  seek  to  maximally  delay  the  completion  of  a 
proliferator’s  weapons  project.  We  will  plan  these  interdictions  by  formulating  and  solv¬ 
ing  a  special,  max-min  “project-interdiction  model.”  A  project-management  submodel 
(Malcolm  et  al.  1959,  Kelley  1961)  forms  the  “min”  part  of  the  interdiction  model;  this 
submodel  integrates  all  the  tasks  necessary  to  produce  a  small  batch  of  gun-type, 
enriched-uranium  weapons  in  the  minimum  amount  of  time  (Harney  et  al.  2006).  Integer¬ 
programming  constructs  surround  the  submodel  to  enable  maximization  of  that  minimum 
through  resource-limited  interdiction.  (Note:  In  the  remainder  of  the  paper,  we  assume 
the  reader’s  familiarity  with  standard  project-management  concepts  such  as  “precedence 
relationship,”  “critical  path”  and  “slack.”  Texts  such  as  Moder  and  Phillips  1983  de¬ 
scribe  these  concepts.) 

Does  optimal  project  interdiction  warrant  a  formal  model?  Critical  tasks,  i.e., 
tasks  on  the  project’s  critical  path,  seem  like  the  obvious  targets  for  interdiction.  In  fact, 
military  planners  to  whom  we  present  this  problem  typically  assume  that  the  optimal  in- 
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terdiction  plan  involves  critical  tasks  with  the  longest  interdiction  delays.  But,  as  Figure 
1  shows,  a  non-critical  task  with  sufficiently  large  delay  can  make  a  better  target  than  any 
critical  task.  Indeed,  the  combinatorial  nature  of  this  problem  makes  a  formal  model  im¬ 
perative  (Brown,  Carlyle,  Royset  and  Wood  2005). 


Figure  1.  The  optimal  interdiction  target  can  be  a  non-critical  task.  This  Microsoft  Project^''^ 
display  shows  a  project  with  standard  precedence  relationships  between  tasks,  but  with  a  one- 
week  lag  in  each  case.  Each  task  on  the  critical  path  (Tasks  1,  2,  3,  4  and  6)  has  a  normal  duration 
of  four  weeks  and  an  interdiction  delay  of  two  weeks.  Task  5,  not  on  the  critical  path,  has  a  nor¬ 
mal  duration  of  12  weeks,  an  interdiction  delay  of  six  weeks,  and  a  slack  of  two  weeks  (indicated 
by  the  dark  narrow  bar).  Interdicting  any  single  critical  task  delays  overall  project  completion 
time  by  two  weeks,  but  interdicting  Task  5  delays  the  overall  completion  time  by  four  weeks. 


Reed  (1994)  is  the  first  to  suggest  a  projeet- interdiction  model  for  optimal  disrup¬ 
tion  of  a  nuclear-weapons  project.  He  does  not  model  the  proliferator’s  full  range  of 
options,  however,  overlooking  the  proliferator’s  ability  to  use  different  methods  to  enrich 
uranium  (“alternate  technologies”)  and  the  ability  to  expedite  project  completion  by  ap¬ 
plying  extra  resources  to  certain  tasks  (“crashing  the  project”).  Brown,  Carlyle,  Royset 
and  Wood  (2005)  investigate  the  complexity  of  various  project- interdiction  models,  and 
show  that  even  a  simpler  version  of  the  model  described  in  the  current  paper  is  NP-hard. 


4 


4  December  2007 


In  fact,  they  point  out  that  this  problem  may  not  even  belong  to  the  problem  class  NP, 
because  simply  evaluating  the  objective  function  for  a  fixed  interdiction  plan  requires  the 
solution  of  an  NP-hard  problem. 

The  inherent  complexity  of  a  nuclear  weapons  project  adds  to  the  complexity  of 
our  interdiction  problem.  Accordingly,  we  have  developed  a  complete  decision-support 
system  that  integrates  thousands  of  project  details  that  cover  physics,  chemistry,  industri¬ 
al  engineering,  and  materials  science,  as  well  as  data  on  the  proliferator’s  ability  to 
marshal  personnel  and  resources  to  achieve  his  goal.  This  system  also  manages  the  data 
pertaining  to  interdiction  options,  and  serves  as  the  interface  between  the  analyst,  data¬ 
base,  model  and  optimizer.  End-users,  i.e.,  policy-makers,  can  use  this  system  to  display, 
and  to  compare  quantitatively,  the  combined  effects  that  various  interdiction  plans  will 
have  on  a  nuclear-weapons  project. 


2  MANAGING  A  NUCLEAR- WEAPONS  PROJECT 

The  proliferator  will  need  to  commit  a  great  deal  of  material,  labor  and  technolo¬ 
gy  to  his  nuclear-weapons  project.  Managing  such  a  complex  and  expensive  project  will 
entail  detailed,  centralized  coordination,  especially  if  the  project  is  to  remain  covert. 
Since  the  late  1950s,  government  and  industry  have  widely  employed  mathematical  tech¬ 
niques  for  managing  complex  projects.  The  original,  simple  models  of  the  Program 
Evaluation  Review  Technique  (“PERT”;  see  Malcolm  et  al.  1959)  and  the  Critical  Path 
Method  (“CPM”;  see  Kelley  1961)  have  been  extended  over  the  years  to  incorporate  a 
variety  of  situations  that  arise  in  different  types  of  projects.  The  proliferator  will  surely 
employ  such  techniques. 
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Project-management  models  are  universally  represented  as  networks  (e.g.,  Moder 
et  al.  1983,  Chapter  1).  In  such  representations,  the  additive  length  of  the  longest  path 
through  the  network,  i.e.,  the  critical  path,  defines  the  overall  duration  of  the  project. 
(Actually,  more  than  one  critical  path  may  exist.)  The  proliferator  wants  to  minimize  the 
completion  time  of  his  weapons  project  by  reducing  the  duration  of  critical  tasks,  i.e., 
tasks  on  a  critical  path  and  tasks  that  end  up  on  a  newly  created  critical  path  as  the  dura¬ 
tions  of  other  tasks  are  reduced.  While  engaged  in  the  project,  the  proliferator  may  be 
able  to  choose  among  several  alternate  technologies  to  reach  certain  intermediate  project 
objectives,  or  “milestone  events.”  Modeling  such  alternatives  is  crucial  because  the  proli¬ 
ferator  will  probably  not  broadcast  his  technological  intentions,  and  he  is  free  to  change 
technologies  in  response  to  our  actions. 

The  proliferator’ s  problem  can  be  represented  as  a  classic  project  network  with 
the  following  embellishments: 

1)  Completion  of  any  task  in  a  “normal”  amount  of  time  consumes  a  fixed 
amount  of  one  or  more  non-renewable  resources  (Malcolm  et  al.  1959). 

2)  The  duration  of  an  individual  task  may  be  expedited,  i.e.,  shortened,  by  alloca¬ 
tion  of  additional  quantities  of  the  required  resources.  The  project  is  “crashed” 
when  its  tasks  are  expedited;  see  Kelley  (1961)  and  his  references,  and  see 
Charnes  and  Cooper  (1962).  We  assume  a  linear  relationship  between  the 
amounts  of  additional  resources  provided  and  a  task’s  expedited  duration,  but 
a  lower  limit  on  that  duration  applies  no  matter  the  amount  of  additional  re¬ 
sources  allocated  to  it. 

3)  Crashing  is  limited  by  the  availability  of  each  resource  and  by  an  overall 
monetary  budget. 
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4)  Certain  milestones  may  be  achieved  via  alternate  courses  of  action.  When  one 
alternative  is  chosen,  the  tasks  in  the  other  altemative(s)  need  not  be  com¬ 
pleted.  Alternate  courses  of  action  diverge  at  decision  nodes,  and  a  CPM 
model  that  includes  one  or  more  such  nodes  is  called  a  decision-CPM  model 
(Crowston  and  Thompson  1967).  In  Harney  et  al.  (2006)  and  in  this  paper,  a 
single  decision  node  selects  one  of  three  uranium-enrichment  technologies: 
gas  diffusion,  gas  centrifuge,  or  aerodynamic. 

5)  Standard  finish-to-start  (FS)  precedence  relationships  between  pairs  of  tasks 
are  generalized  to  include  start-to-start  (SS),  finish-to-finish  (FF)  or  start-to- 
finish  (SF).  There  is  a  finite  lag  time  associated  with  each  precedence  con¬ 
straint  (e.g.,  Moder  et  al.  1983,  Chapter  2);  negative  lags  represent  lead  times. 

3  INTERDICTING  A  NUCLEAR-WEAPONS  PROJECT 

We  henceforth  use  the  term  interdictor  to  refer  to  the  entity  (e.g.,  nation,  group  of 
nations)  trying  to  delay  the  proliferator’s  project.  The  interdictor  may  exert  interdiction 
effort  against  tasks  in  various  ways,  but  will  be  limited  by  any  combination  of  a  monetary 
budget,  a  weapons  budget,  diplomatic  constraints,  constraints  on  environmental  damage, 
or  constraints  on  economic  consequences.  We  model  the  interdiction  of  the  proliferator’s 
project  as  a  max-min  problem  (Danskin  1967).  Our  max-min  problem  is  an  instance  of 
the  bilevel  programming  model  described  by  Bard  (1982),  and  is  an  instance  of  a  two- 
stage  Stackelberg  game,  as  explained  by  Israeli  and  Wood  (2002).  See  also  Brown,  Car¬ 
lyle,  Salmeron  and  Wood  (2006)  and  that  paper’s  references.  The  interdictor  will  first 
choose  a  task  or  set  of  tasks  to  interdict  that  maximize  the  length  of  the  resulting  critical 
path.  Then,  after  observing  the  interdiction  plan,  the  proliferator  will  choose  an  enrich¬ 
ment  technology  to  implement  and  tasks  to  expedite  that  minimize  his  overall  project 
completion  time. 
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In  the  real  world,  the  interdictor  could  interdict  some  tasks;  observe  the  prolifera- 
tor’s  response;  interdict  additional  tasks,  later,  as  the  project  proceeds;  observe  the 
proliferator’s  response;  and  so  on.  However,  the  two-stage  model  is  solvable — a  multi¬ 
stage  model  might  not  be — and  it  provides  a  valid  lower  bound  on  the  interdictor’ s  ability 
to  delay  the  project.  That  is,  the  two-stage  model  is  conservative.  Of  course,  if  the  inter¬ 
dictor  does  decide  to  hold  back  some  interdiction  effort  for  later  use,  he  can  use  the  same 
model,  over  a  rolling  horizon,  to  suggest  a  sequence  of  interdictions  using  unexpended 
resources.  The  interdictor  can  do  no  worse  with  this  strategy  than  he  would  by  imple¬ 
menting  the  plan  suggested  by  the  two-stage  model. 

For  ease  of  explanation,  we  make  the  following  simplifying  assumptions  when 
modeling  interdictions.  Possible  extensions,  in  parentheses,  follow  each  assumption. 

1)  Interdicting  a  task  delays  its  completion  by  a  constant  amount.  (This  extends 
easily  to  discrete  levels  of  delay  that  depend  on  level  of  interdiction  effort.) 

2)  All  interdictions  take  place  before  the  project  begins.  (The  interdiction  of  a 
partially  completed  project  can  also  be  modeled.  If  interdicted,  a  partially 
completed  task  would  just  be  delayed,  but  a  fully  completed  task  might  need 
to  be  restarted.  For  example,  if  a  piece  of  hardware  were  destroyed,  it  would 
need  to  be  reconstructed  or  re-acquired.  All  the  successors  of  such  a  task 
would  probably  be  halted  until  that  task  is  “re-completed,”  or  we  might  re¬ 
quire  them  to  be  restarted  from  scratch.  Or,  an  alternate  technology  would 
need  to  be  adopted.) 

3)  Interdiction  plans  are  limited  by  one  or  more  “interdiction-budget  con¬ 
straints.”  These  constraints  may  represent  any  various  limits  on  interdiction 
resources,  physical  or  diplomatic  (e.g.,  money,  number  of  military  actions, 
number  of  embargoes).  (Logical  constraints  are  easy  to  incorporate:  for  exam¬ 
ple,  “If  task  i  is  interdicted,  task  j  must  not  be.”) 
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4  CASE  STUDY 

The  project-interdiction  model  will  be  easier  to  understand  if  we  first  present  the 
foundations  of  a  case  study.  In  this  study,  we  suspect  that  a  rogue  nation  is  developing  a 
fission  weapon.  The  basics  of  designing  such  a  weapon  are  now  well  known  and  publicly 
available.  Indeed,  many  of  the  details  from  the  early  weapons  programs  in  the  United 
States  and  elsewhere  have  been  declassified  and  appear  in  the  open  literature  (e.g.,  FAS 
1998).  Consequently,  the  key  to  developing  a  weapon  will  be  to  obtain  the  key  raw  ma¬ 
terial,  viz.,  weapons-grade  uranium  or  plutonium.  The  proliferator  cannot  buy  these 
materials  on  the  open  market  given  current  international  controls,  so  he  will  need  to  make 
substantial  investments  in  industrial  infrastructure  and  develop  his  own,  domestic  produc¬ 
tion  capability.  (For  context,  see  Spears  2001,  who  traces  the  lifecycle  of  nuclear 
materials  from  raw  ore  to  waste  disposal.) 

4,1  CASE-STUDY  ASSUMPTIONS 

We  postulate  the  proliferator  as  a  medium-sized,  developing  country  that 

•  Operates  several  commercial  nuclear  reactors  to  generate  electric  power; 

•  Has  a  population  that  is  generally  well-educated  by  several,  modern  research 
universities; 

•  Has  a  modem  chemical  industry  (even  though  many  other  industries  may  be 
underdeveloped  by  Western  standards); 

•  Has  substantial  reserves  of  uranium  ore;  and 

•  Is  a  well-established  producer  of  concentrated  uranium  ore  called  “yellow- 
cake”  (for  the  country’s  own  consumption  and  for  the  international  market). 

Furthermore,  the  proliferator 
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•  Has  ratified  the  Nuclear  Nonproliferation  Treaty;  and 

•  All  safeguards  established  by  the  International  Atomic  Energy  Agency 
(IAEA)  are  in  place.  (The  United  Nations  charters  IAEA  to  ensure  that  signa¬ 
tories  of  the  NPT  use  nuclear  materials  only  for  peaceful  purposes.  IAEA 
forges  comprehensive  safeguard  agreements,  negotiates  additional  protocols 
for  locating  and  rationalizing  the  presence  of  any  quantity  of  nuclear  material, 
encourages  state  systems  to  account  for  and  control  nuclear  material,  and  em¬ 
ploys  remote  sensing  to  detect  undeclared  nuclear  activities;  see  IAEA  2005, 
pp.  67-71.) 

The  proliferator  seeks  his  own  nuclear  weapons  to  counter  growing  threats  from 
neighboring  countries,  and  to  gain  credibility  on  the  international  stage  as  a  key,  regional 
player.  The  proliferator’s  military  and  political  advisors  have  come  to  the  consensus  that 
a  total  nuclear  arsenal  of  several  dozen  weapons  will  achieve  these  goals. 

The  proliferator’s  economy  depends  heavily  on  nuclear  power  generation,  and 
this  dependence  will  only  grow  over  time.  The  proliferator  will  not  jeopardize  this  eco¬ 
nomic  resource  by  openly  violating  the  NPT,  so  he  must  operate  a  covert  nuclear- 
weapons  program.  To  remain  covert,  the  program  must  operate  independently  of  the  pro- 
liferator’s  existing  nuclear  facilities,  which  are  monitored  by  the  IAEA.  (History  shows 
that  most  nations  seeking  nuclear  weapons  establish  separate  military  programs,  rather 
than  divert  enriched  nuclear  material  from  their  safeguarded  civilian  facilities;  see 
NERAC  2001.)  Even  if  discovered,  continued  covert  development  lends  itself  to  official 
denials  and  obfuscation.  That  will  help  the  proliferator  avoid  quick  reprisals  from  the  in¬ 
ternational  community,  and  enable  him  to  reach  the  ultimate  goal  of  a  nuclear  arsenal. 

Because  NPT  safeguards  do  not  pertain  to  uranium  mining  and  yellowcake  pro¬ 
duction  (U.S.  Congress  OTA  1993,  p.  137),  the  surest  path  to  a  nuclear-weapons  program 
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leads  through  the  development  of  a  uranium-enrichment  capability  fed  by  existing  yel- 
lowcake  production;  producing  and  using  the  alternative  bomb-making  material, 
plutonium,  would  be  more  difficult  (e.g.,  EPA  2007).  Highly  enriched  uranium  (HEU) 
can  be  used  in  a  gun-type  or  implosion-type  fission  weapon,  but  it  can  also  fuel  the  proli- 
ferator’s  commercial  reactors.  Thus,  if  the  proliferator  must  abandon  his  weapons 
program  for  any  reason,  he  knows  that  no  HEEl  he  has  time  to  produce  will  go  to  waste. 

Given  the  proliferator’ s  goal  of  completing  a  first  weapon  as  soon  as  possible,  we 
assume  that  he  will  pursue  a  gun-type  weapon,  the  same  design  used  in  the  “Eittle  Boy” 
bomb  dropped  on  Hiroshima,  Japan  in  1945.  That  design  is  simple  but  reliable:  Eittle 
Boy  was  crude,  but  its  designers  were  so  confident  in  its  construction  that  Hiroshima  was 
its  first  full-scale  test  (Rhodes  1995,  pp.  17-18). 

The  proliferator  can  hide  his  nuclear  research-and-production  facilities  in  existing 
industrial  parks,  where  they  should  escape  notice  due  to  the  concomitant  growth  of  legi¬ 
timate  industry. 

4,2  CASE-STUDY  DATA 

To  reduce  the  chance  of  detection  while  still  achieving  sufficient  capacity  to  meet 
the  arsenal  goal  in  just  a  few  years,  the  proliferator  will  design  production  facilities  to 
produce  six  weapons  per  year.  This  goal  requires  an  annual  output  of  250  kilograms  of 
HEU,  which  requires  an  annual  input  of  about  68  metric  tons  of  yellowcake  (Harney  et 
al.  2006).  Because  IAEA  safeguards  for  yellowcake  cover  only  imports  and  exports,  co¬ 
vert  diversion  of  this  relatively  small  quantity  from  the  existing  production  facilities 
should  be  easy:  5.6  metric  tons  per  month  suffices,  and  5.6  tons  of  yellowcake  will  fit  on 
a  small  truck. 
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Designing  a  nuclear  weapon,  and  constructing  and  operating  the  sophisticated 
support  facilities  required  to  build  six  weapons  per  year  makes  for  a  complicated  project. 
Necessary  achievements  include: 

•  Covert  diversion  of  68  metric  tons  of  yellowcake  annually; 

•  Production  of  enrichment-plant  feed  material  (uranium  hexafluoride,  f/Fe) 
from  yellowcake; 

•  Uranium  enrichment; 

•  Conversion  of  highly  enriched  UFe  to  uranium  metal;  and 

•  Design  and  construction  of  the  actual  weapons. 

Harney  et  al.  (2006)  assess  these  requirements  and  model  the  proliferator’s  wea¬ 
pons  project  using  a  project  network  containing  approximately  200  nodes  (tasks)  and  600 
arcs  (direct  precedence  relationships  between  tasks).  The  proliferator  manages  five  non¬ 
renewable  resources:  energy,  materials,  professional  labor  (e.g.,  scientists,  engineers), 
skilled  labor  (e.g.,  machinists,  electronics  technicians)  and  unskilled  labor.  Table  1  sum¬ 
marizes  the  costs  and  availability  of  these  resources.  Figure  2  displays  a  small  part  of  the 
complete  Gantt  chart  associated  with  one  candidate  project  plan. 
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Table  1.  Cost  and  availability  of  resources  in  the  case  study.  The  project  is  further  constrained 
by  a  budget  of  $380  million.  Costs  are  fictitious. 


Resource 

Units 

Unit  Cost  ($/Unit) 

Total  Units  Available 

Energy 

MWhr 

too 

3,100,000 

Materials 

$k 

1,000 

190,000 

Professional  Labor 

Mmo 

48,000 

10,000 

Skilled  Labor 

Mmo 

24,000 

10,000 

Unskilled  Labor 

Mmo 

6,000 

6,000 

Legend:  MWhr  =  megawatt-hours,  $k  =  thousands  of  dollars,  Mmo  =  man-months 


Our  case  study  employs  only  mild,  non-military  interdictions  of  tasks:  we  assume 
the  interdictor  prefers  to  avoid  the  casus  belli  that,  say,  strategic  strikes  would  imply.  Ta¬ 
ble  2  shows  how  to  interpret  each  task’s  “index”  in  Harney  et  al.  (2006),  to  recover  data 
that  defines  the  cost  to  interdict  the  task  and  the  delay  resulting  from  interdiction.  Our 
computational  examples  also  place  limits  on  the  total  number  of  tasks  interdicted. 


Table  2.  Interdiction-delay  and  cost  indexing  for  tasks  in  Harney  et  al.  (2006).  Each  upper-case 
letter  code  denotes  an  interdiction  delay  in  months,  and  each  lower-case  letter  code  an  interdic¬ 
tion  cost  in  millions  of  dollars.  For  example,  the  index  “Fa”  for  task  131,  “(Acquire)  Hafhia 
crucibles,”  indicates  that  interdicting  this  task  would  inflict  a  24-month  delay  on  the  task  and 
would  cost  the  interdictor  0.20  million  dollars.  Costs  are  fictitious. 


Delay  Index 

A 

B 

C 

D 

E 

F 

G 

H 

I 

J 

K 

F 

Delay  (Months) 

4 

8 

12 

16 

20 

24 

28 

36 

40 

48 

56 

60 

Cost  Index 

a 

b 

c 

d 

Cost  ($M) 

0.20 

0.45 

1.20 

1.70 
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Figure  2,  Portion  of  a  Gantt  chart,  produced  with  Microsoft  Project™,  that  displays  7  of  196 
tasks  in  the  case-study  project.  “(Acquire)  Diffusion  barriers”  constitutes  one  task  in  the  gas  dif¬ 
fusion  uranium  enrichment  process;  it  is  represented  by  a  two-part  horizontal  bar.  The  left  part, 
with  diagonal  hashing,  represents  the  task’s  implemented  length  of  44.12  weeks,  as  labeled.  The 
direction  of  the  hashing,  from  top-left  to  bottom-right,  indicates  that  the  task  is  critical.  The 
second  part  of  the  bar,  on  the  right  and  with  vertical  hashing,  indicates  that  the  task  has  been  ex¬ 
pedited  by  the  length  of  the  hashed  extension  (an  unlabeled  3.88  weeks).  “(Acquire)  Pumps  and 
piping”  is  another  task  represented  by  a  two-part  bar.  The  left  part,  with  top-right  to  bottom-left 
diagonal  hashing,  denotes  a  non-critical  task;  the  right  part  (a  thick  line)  indicates  the  amount  of 
slack  in  this  task  (20.12  weeks,  unlabeled),  which  represents  the  delay  that  the  task  can  incur  be¬ 
fore  becoming  critical.  The  figure  also  shows  an  “FF”  relationship  between  “Cascade  loading” 
and  “Production  of  enriched  and  depleted  material.” 


Diffusion  barriers 
Heat  exchangers 
Pumps  and  piping 


Assembly  of  production  devices 


Integration  of  enrichment  cascade 


iduction  of  enriched  and  depleted 


5  A  MODEL  TO  MAXIMALLY  DELAY  A  PROJECT:  DCPMI 

Here,  we  formulate  a  model  to  interdict  a  project  that  is  defined  using  generalized 
decision-CPM  constructs.  This  interdiction  model,  denoted  DCPMI,  will  identify  inter¬ 
diction  actions,  subject  to  interdiction-resource  constraints,  that  maximally  delay  a 
proliferator’s  nuclear- weapons  project,  given  that  the  proliferator  will  observe  any  such 
actions  and  adjust  his  plans  (i.e.,  choice  of  enrichment  technology  and  task-expediting 
efforts)  to  minimize  the  project’s  completion  time.  We  use  an  activity-on-node  formula¬ 
tion  of  the  project  network  in  which  a  node  represents  a  project  task,  and  an  arc 
represents  the  partial  order  between  a  predecessor-  and  successor-task  pair  (e.g.,  Ahuja  et 
al.  1993,  pp.  732-734).  For  simplicity  of  exposition,  we  (a)  make  assumptions  for  the 
interdictor  as  described  in  Section  3,  and  (b)  measure  the  consumption  of  each  task- 
expediting  resource  r,  whether  monetary  or  physical,  in  units  called  “r-dollars.” 
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Model:  Delaying  a  decision-CPM  project,  DCPMI 

Indices  and  Index  Sets  [cardinality] 

i,  j  e  N  tasks  (nodes)  [~200] 

[start,  end [<^N  project  start  and  end  tasks,  respectively 

{i,j)  e  A  precedence  relationships:  task  i  directly  precedes  task  j  (arcs)  [-600] 

Ap^  c  A  (oy)  ^  Ap^  if  task  i  must  finish  before  task  j  can  start 

App  ^  A  (by)  ^  ^FF  ^  must  finish  before  task  j  can  finish 

A^P  c  A  (by)  ^  ^sF  ^  must  start  before  task  j  can  finish 

A^^  c  A  (by)  ^  ^55  if  task  i  must  start  before  task  j  can  start 

( Ap^ ,  App ,  A^p ,  A^^  are  mutually  exclusive  and  exhaustive  subsets  of  A.) 
p  ^  P  decision  outcomes  (in  our  example,  the  three  enrichment  technologies)  [3] 

Nq^N  tasks  not  associated  with  any  decision  (in  all  cases,  {start, end}  <^Nq) 

Np  (z  N  all  tasks  associated  with  decision  outcome  p  &  P 

(  Nq  and  the  sets  Np,  \/p  ^P,  form  a  partition  of  N) 

Np  d  N  decision  nodes 

r  e  y?  non-renewable  project  resources  (for  the  proliferator)  [5] 

r'  e  R'  non-renewable  interdiction  resources  (for  the  interdictor)  [2] 

Data  [units] 

dj ,  duration  of  task  i  e  N  with,  respectively,  no  expediting  effort  and  maxi¬ 

mum  expediting  effort  [weeks].  Note:  d^  =d^=Q  for  i  e  [start, end} 
lagy  time  lag  for  a  precedence  constraint  indexed  by  {i,j)  e  A  [weeks] 

fij  1  if  {i,j)  e  App  '<->  Ap^  ,  else  0.  Indicates  that  task  fs  duration  affects  the 

start  of  task  j 
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f" 

J II 


br 

delay^ 

^max 


W„ 


1  if  [i,j)  e  App  ^  Agp  ,  else  0.  Indicates  task  fs  duration  affects  task  i’s 
start 


the  cost,  in  terms  of  project  resource  r  eR  ,  to  complete  task  i  g  N  with 
no  expediting  effort  [r-dollars] 

the  per-week  cost,  in  terms  of  project  resource  r  e  7? ,  for  expediting  task 
i  e  N  [r-dollars/week] 

total  budget  for  decision-and-expediting  resource  r  eR  [r-dollars] 
amount  that  task  i  e  N  is  delayed  if  interdicted  [weeks] 
a  large  number  used  to  relax  precedence  constraints  for  tasks  that  are  not 


actually  completed  (e.g., 


=  max 

ieN 


(^dj  +  delay ^ 


+  max 


lagij  )  [weeks] 


cost  to  interdict  task  ieN  in  terms  of  interdiction  resource  r'  e  R'  [r- 
dollars] 

total  budget  for  interdiction  resource  r'  e  R'  [r'-dollars] 


Variables  [units  if  applicable] 

X^  1  if  task  ieN  is  interdicted,  0  otherwise  (vector  X  is  the  “interdiction 

plan”) 

£)•  £)•  =  1  if  task  ieN  is  completed,  0  otherwise  (vector  D  is  the  “decision 

plan”) 

amount  task  ieN  is  expedited  (vector  E  is  the  expediting  plan)  [weeks] 

Si  earliest  start  time  of  task  ieN  (vector  S)  [weeks] 


Formulation:  DCPMI 


Z  =  max 

XeH 


min 


(D,E,s)eA(X) 


^end 


(1) 


where  the  set  S  is  defined  by 
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w , 

r 

yr'eR',peP 

(2) 

ieN^uNp 

X,e{0,1} 

yi^N, 

(3) 

set  A(X)  is 

;  defined  by 

ft- 

-  E- +  delay  iX-) 

-n( 

7- 

Ej  +  delay jXj )  +  lag^j  -  d^J^l  - 

-A) 

(4) 

I 

CirD 

i  +  Z  ^ 

Vr  e  7? 

(5) 

i&N  Start-end 

ieN  start— end 

Dj>D, 

y{ij)^A\i^N^ 

(6) 

II 

M 

A 

Vi  e  Njj 

(V) 

A-1 

Vi  e  Nq 

(8) 

o<A<^- 

-A 

yi^N 

(9) 

m 

o 

(10) 

yi^N 

(11) 

O 

III 

(12) 

Discussion 

The  objective  function  (1)  represents  the  interdictor’s  desire  to  chose  an  interdic¬ 
tion  plan  X  that  increases  individual  task  durations  and  thereby  maximizes  the  project’s 
overall  completion  time;  simultaneously,  it  also  represents  the  proliferator’s  desire  to  mi¬ 
nimize  that  time  by  choosing  which  tasks  to  complete  in  a  decision  plan  D,  and  by 
choosing  which  tasks  to  expedite  with  expediting  plan  E,  and  by  solving  for  earliest  start 
times  S.  The  interdictor’s  actions  are  restricted  to  the  set  S  ,  as  defined  by  constraints  (2) 
-(3),  and  for  any  specific  interdiction  plan  X  chosen  by  the  interdictor — the  reader 
should  view  X  as  data  now — the  proliferator’s  resulting  decisions  are  restricted  to  the  set 
A(X)  ,  as  defined  by  constraints  (4)-(12). 
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Each  constraint  (2)  asserts  a  budget  restriction  for  one  of  the  decisions  the  prolife- 
rator  can  make;  the  total  expenditure  of  budget  resource  r'  cannot  exceed  w^,  for  any 

realization  of  the  proliferator’s  decision  plan.  Specifically,  for  each  enrichment  technol¬ 
ogy  a  separate  set  of  budget  constraints  limits  overall  interdiction  expenditures  for  non¬ 
enrichment  tasks  together  with  the  tasks  for  that  specific  enrichment  technology.  For  ex¬ 
ample,  given  a  single  “budget”  of  one  interdiction,  the  interdictor  could  attack  one  task 
that  is  not  part  of  any  specific  enrichment  technology,  or  he  could  interdict  three  tasks, 
one  from  each  technology.  This  modeling  assumption  allows  the  interdictor  to  develop 
interdiction  plans  that  are  contingent  upon  the  proliferator’s  choice  of  technology,  but  not 
upon  his  application  of  expediting  resources.  This  prevents  situations  in  which  the  inter¬ 
dictor  commits  to  interdictions  of  tasks  specific  to  one  technology,  and  the  proliferator 
simply  chooses  a  different  technology  and  avoids  interdiction  altogether.  We  are  there¬ 
fore  assuming  that,  by  the  time  enrichment-specific  tasks  must  be  interdicted,  the 
interdictor  will  have  become  aware  of  the  proliferator’s  choice  of  technology,  and  will 
interdict  only  the  relevant  tasks. 

We  express  constraints  (4)  in  a  nonstandard  fashion  to  emphasize  the  roles  played 
by  f^j  and  f” .  Each  such  constraint  enforces  a  lower  limit  on  the  difference  between 
the  earliest  start  time  of  a  task  j  and  one  of  its  predecessor  tasks  i,  based  on  the  nature  of 
the  precedence  relationship  between  i  and  j.  The  term  {di  -E-  +  delay  is  included  if 
that  precedence  relationship  relates  to  the  finish  time  of  task  i,  and  the  term 
-{^dj  -  Ej  +  delay jXj^  is  included  if  that  precedence  relationship  relates  to  the  finish 
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time  of  task  j.  Each  of  these  constraints  also  accounts  for  the  lag  between  tasks  i  and  j, 
specified  by  lag^  . 

Constraints  (5)  enforce  monetary  and/or  physical  resource  limitations  on  the  proli- 
ferator’s  actions.  Constraints  (6)  require  the  completion  of  each  successor  of  any 
completed  task,  except  for  certain  successors  of  the  decision  node.  Constraints  (7)  require 
that  exactly  one  of  the  successors  of  the  (single)  decision  node  be  completed,  thereby  gu¬ 
aranteeing  the  selection  of  exactly  one  enrichment  technology.  Constraints  (8)  require 
the  completion  of  all  non-decision  tasks.  Constraints  (9)  limit  the  amount  by  which  each 
task  i  can  be  expedited.  The  artificial  start  and  end  tasks  have  durations  d^t^rt  -  dstart  =  0 

and  d^^j  =  d^^j  =  0  ,  respectively,  and  therefore  so  these  constraints  prohibit  the  expedit¬ 
ing  of  these  tasks. 


5.1  EMIN:  OPTIMAL  DECISION-CPM  AFTER  INTERDICTION 

For  a  fixed  interdiction  plan  X  e  S ,  we  denote  the  resulting  decision-CPM  model 


as  EMIN^xj  with  objective  function 


(x)  = 


'mm  ^end  '■ 


(D,E,s)eA(x) 


(13) 


and  with  constraints  defined  by  (4)-(12).  Our  overall  goal  is  therefore  to  solve 


Z* 


(14) 


In  theory,  we  could  solve  (14)  by  enumerating  the  finite  set  of  interdiction 
plans  X  e  S ,  solving  EMIN(X)  for  each,  and  choosing  the  plan  that  results  in  the  largest 
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value  of  practice,  S  is  too  large  to  enumerate,  so  we  solve  (14)  with  the  de¬ 

composition  algorithm  described  immediately  below. 

5.2  DMAX:  HOW  TO  OPTIMALLY  DELAY  A  PROJECT  WITH  A  KNOWN 
DECISION-AND-EXPEDITING  PLAN 

Our  procedure  for  solving  DCPMI  requires  an  upper  bound  on  the  optimal  objec¬ 
tive  value,  i.e.,  an  optimistic  value  on  how  long  we  can  expect  to  delay  the  proliferator. 

Accordingly,  we  formulate  an  optimization  model,  denoted  DMAX^D,Ej,  that  deter¬ 
mines  an  optimal  interdiction  of  any  fixed  decision-and-expediting  plan  ^D,Ej;  we 
assume  this  plan  always  satisfies  (4)-(12).  A  solution  to  this  model  yields  the  upper 
bound  we  seek,  because  the  proliferator’s  response  is  restricted  to  (D,Ej . 

We  adopt  the  dual,  longest-path  point  of  view  in  this  formulation  (e.g.,  Ahuja  et 
al.  1993,  pp.  733-734):  the  model  routes  one  unit  of  “flow”  along  a  single,  longest  path 
through  the  activity-on-node  network.  However,  we  must  define  several  sets  of  auxiliary 
binary  variables,  and  associated  constraints,  to  “cost  out”  that  path  correctly. 

Model  DMAX(D,E):  Delaying  a  project  having  a  fixed  decision-and-expediting 
plan  (only  constructs  not  defined  earlier  are  listed  here) 

Indices  and  Index  Sets 

N  e  A I  D,.  =  l|  (Note:  {start,  end }  c  A  ) 

Variables  [units] 

Z  duration  of  the  project  [weeks] 

Y-j  1  if  the  precedence  relationship  (/,  j)  is  on  the  critical  path,  0  otherwise 
1  if  task  i  is  on  the  critical  path  and  is  not  interdicted,  0  otherwise 
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W-  1  if  task  i  is  on  the  critical  path  and  is  interdicted,  0  otherwise 

W/'  1  if  task  i  is  on  the  critical  path  and  its  duration  must  be  subtracted,  0  otherwise 

Formulation 


'max(D,E)=  max  Z 

(15) 

X,Y,W,W',W" 

>-l-  Z +X(rfi -E,  +delayiW- 

igN  ieN 

-y{d,-Ei)ir-+  y  lag,r,i 

(16) 

ieN 

iJsN 

+1 

i  =  start 

X  ^‘1-  X 

0 

i  e  N\\^start,end^ 

(17) 

JeN\(i,j)eA  jeN\(j,i)eA 
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Discussion 

The  objective  function  (15)  represents  the  overall  project  duration  Z.  We  use  a 
nonstandard  formulation  to  represent  the  calculation  of  this  objective  in  constraint  (16), 
in  order  to  motivate  and  simplify  the  description  of  the  decomposition  algorithm  that  fol¬ 
lows.  Constraint  (16)  bounds  the  project  duration  by  the  sum  of  the  task  durations  and  the 
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appropriate  lag  times  along  a  critical  path  resulting  from  the  fixed  decision-and- 
expediting  plan  ^D,Ej .  A  task’s  duration  depends  on  whether  or  not  it  has  been  inter¬ 
dicted  and,  based  on  interactions  between  the  various  precedence  relations,  this  task’s 
duration  is  either  added  to  the  overall  project  duration,  or  subtracted  from  it,  or  has  no 
influence.  The  upper  bound  implied  by  the  right-hand  side  of  (16)  is  valid  because  it 
computes  the  length  of  a  critical  path  for  any  interdiction  plan  under  the  restrictive  as¬ 
sumption  that  the  proliferator  cannot  change  his  decision-and-expediting  plan. 

Flow-balance  constraints  for  this  activity-on-node  network  appear  in  (17).  These 
ensure  the  consistent  routing  of  a  single  unit  of  “critical  flow”  through  the  network,  from 
the  artificial  start  task  to  the  artificial  end  task.  Constraints  (18)  and  (19)  determine  if  a 
task’s  duration  can  add  to  the  critical  path’s  length;  the  task’s  duration  can  be  the  unin¬ 
terdicted,  expedited  duration,  or  the  interdicted,  expedited  duration.  The  variable  is  1 
when  (a)  task  i  is  on  the  critical  path,  (b)  task  i’s  duration  adds  to  the  length  of  the  critical 
path,  and  (c)  task  i  is  not  interdicted;  is  0  otherwise.  The  variable  W!  is  1  when  (a) 
task  i  is  on  the  critical  path,  (b)  task  i 's  duration  adds  to  the  length  of  the  critical  path,  and 
(c)  task  i  is  interdicted;  is  0  otherwise.  Note  that  task  i’s  duration  adds  to  the  critical- 

path  length  only  if  there  exists  a  critical  arc  {i,j)^ApgUApp,  and  a  critical  arc 

iJ  ■>  0  ^  ^ss  • 

Constraints  (20)  determine  whether  a  particular  task  on  the  critical  path  has  pre¬ 
decessor  and  successor  relationships  along  that  path  that  require  its  duration  be  subtracted 
from  the  overall  project  duration:  the  variable  W”  is  1  if  and  only  if  task  i  is  on  the  criti¬ 
cal  path,  and  this  task’s  duration  subtracts  from  the  length  of  the  critical  path.  This 
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unusual  situation  occurs  when  (a)  a  sequence  of  tasks  h-i-j  lies  on  the  critical  path,  (b) 
either  the  start  or  the  finish  time  of  task  h  places  a  lower  bound  on  the  finish  time  of  task 
i,  and  (c)  the  start  time  of  task  i  places  a  lower  bound  on  the  start  or  finish  time  of  task  j. 
In  realistic  situations,  other  tasks  would  constrain  the  start  time  and  the  end  time  of  a  task 
i,  and  it  is  unlikely  that  the  sequence  of  three  tasks  required  for  this  unusual  situation 
would  be  critical  simultaneously. 

Constraints  (17)-(25)  are  defined  only  with  respect  to  tasks  that  are  completed  by 
the  proliferator,  i.e.,  tasks  i^N .  Therefore,  no  restrictions  apply  to  W,  W' ,  W"  or  Y 
for  tasks  involved  in  the  technologies  not  chosen  by  the  proliferator. 

Constraints  (21)  and  (22)  determine  whether  the  interdicted  or  uninterdicted  ver¬ 
sion  of  a  task  can  appear  on  the  critical  path.  Constraints  (23)  enforce  various 
interdiction-resource  constraints  on  the  interdictor,  although  they  could  also  represent 
logical  constraints  such  as  “Do  not  place  embargoes  on  more  than  two  of  the  prolifera¬ 
tor’ s  critical  resources,”  or  “If  task  i\  is  interdicted,  then  task  i2  must  not  be.”  Constraints 
(24)  preclude  interdiction  of  the  artificial  start  and  end  nodes,  and  of  any  decision  node. 
Constraints  (25)  maintain  consistency  of  the  definition  of  :  the  artificial  start  and  end 
nodes  always  appear  on  the  critical  path. 

5.3  ALGORITHM  MAXMIN 

We  now  present  a  decomposition  algorithm,  denoted  MAXMIN,  to  solve  (14).  As 
a  generalization  of  Benders  decomposition  (Benders  1962),  MAXMIN  alternates  be¬ 
tween  (a)  a  master  problem  that  identifies  an  optimal  interdiction  plan  for  a  fixed 
decision-and-expediting  plan,  and  (b)  a  subproblem  that,  for  a  fixed  interdiction  plan, 
chooses  an  optimal  combination  of  enrichment  technology  and  expediting  plan  for  the 
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weapons  program.  MAXMIN  does  look  similar  to  the  Benders-decomposition  algorithm 
used  by  Israeli  and  Wood  (2002)  to  identify  interdictions  in  a  road  network  that  maximize 
the  length  of  the  shortest  s-t  path.  However,  unlike  standard  Benders  decomposition, 
MAXMIN ’s  subproblem  is  a  difficult  integer  program,  not  a  linear  program  (and  not  an 
integer  program  that  solves  directly  through  its  linear-programming  relaxation,  as  with  a 
shortest-path  model).  Furthermore,  the  master  problem  exploits  a  nominally  non- 
convergent  bound,  which  we  augment  with  special  constraints  to  guarantee  the  algo¬ 
rithm’s  convergence. 

At  iteration  K  of  MAXMIN,  a  set  of  decision- and-expediting  plans 
k  =  l,...,K,  will  have  been  generated  from  the  subproblem.  The  optimal  objective  to 
DMAX^D^,E^  j  would  provide  a  valid  upper  bound  on  Z*  at  that  point.  However,  to 
obtain  a  bound  that  can  improve  from  iteration  to  iteration,  MAXMIN  solves  a  master 
problem  that  defines  a  restriction  of  DMAX^D^,E^  j ,  by  replacing  the  single  constraint 

(16)  in  DMAX^D^,E^  j  with  the  following  constraints: 

z<  y;  (7  -£,*)»:■+  Z  w  -£‘+*zot,)< 

-  Z  (7 Z  ‘‘•gij^ii  covk=i,...,K. 

Df=D)=\ 

We  refer  to  constraints  (27)  as  “cuts”  because  they  are  analogous  to  Benders  cuts;  we  de¬ 
note  the  master  problem  that  includes  these  cuts  as  DMAX^. 

The  optimal  objective  value  to  DMAX^  provides  a  valid  upper  bound  on  Z*  be¬ 
cause  each  cut  in  (27)  is  valid  for  any  interdiction:  (a)  Either  the  cut  at  iteration  k  was 
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generated  by  the  same  decision  plan  as  the  “active”  technology  for  this  instance  of  the 
master  problem,  (that  is,  for  =  D^),  and  that  cut’s  validity  follows  from  the  arguments 
used  to  justify  DMAX(D,E) ,  or  (b)  a  different  technology  generated  that  cut,  in  which 
case  the  cut  is  relaxed.  In  the  latter  case,  constraints  (17)-(20)  do  not  restrict  variables 
W^,W',  and  W” ,  so  that  the  corresponding  cut  in  (27)  is  relaxed. 

Unfortunately,  the  upper  bound  from  DMAX^  need  not  converge  to  Z* .  This  is 
true  because  even  if  DMAX^  covered  all  decision  plans,  its  solution  would  find  the  best 
interdiction  plan  assuming  that  the  interdictor  can  dictate  the  proliferator’s  decision  plan. 
To  alleviate  this  difficulty,  we  simply  add  what  we  call  solution-elimination  constraints 
(SECs).  (Brown  et  al.  1997  discuss  SECs  without  naming  them;  Israeli  and  Wood  2002 
define  a  generalization  of  SECs,  called  “super-valid  inequalities,”  but  use  those  inequali¬ 
ties  to  speed  convergence  of  a  decomposition  algorithm,  not  to  ensure  its  convergence.) 
The  following  SECs  prohibit  any  interdiction  plan  X*’ ,  k  =  \,...,K,  from  being  repeated, 
but  allow  all  others: 

X  A-,+ y;  (i-A-,)>i,  k=\,...,K.  (28) 

i\Xf=0 

The  upper  bound  provided  by  DMAX^  with  constraints  (28)  may  not  be  valid  if 
some  is  actually  optimal,  but  that  bound  can  drop  below  Z*  only  if  an  optimal  solu¬ 
tion  is  in  hand,  at  which  point  the  validity  of  the  bound  is  moot.  Step  7  in  the  algorithm 
accommodates  this  situation.  A  full  description  of  the  algorithm  follows. 


25 


4  December  2007 


Algorithm  MAXMIN 

Input:  Data  for  DCPMI,  and  optimality  tolerance  ^  >  0  ; 

Output:  ^-optimal  interdiction  plan  X* ,  and  provable  optimality  gap; 

Note:  denotes  the  optimal  objective  value  from  EM]N(X^), 

and  denotes  the  optimal  objective  value  from  DMAX^  with 
SECs  added. 

1)  Initialize  upper  bound  <—  00 ,  lower  bound  ^LB  <— 0,  define  the 

*  1 

incumbent,  null  interdiction  plan  X  <—  X  <—  0  as  the  best  found  so 
far,  and  set  iteration  counter  X  •«—  1 ; 

2)  Subproblem:  Attempt  to  solve  EMIN(X^)  to  determine  the  prolifera- 
tor’s  optimal  decision-and-expediting  plan  (D^,E^)  given  X^;  the 
bound  on  the  associated  project  length  is  (X  ) ; 

3)  If  (  EMIN(X^)  is  infeasible )  set  <—  oo  and  go  to  End; 

/*  Above,  if  the  subproblem  is  infeasible,  the  proliferator  cannot  afford 
to  complete  the  interdicted  project.  */ 

4)  If  (  Z|^jri  >  ^LB  )  ^LB  ^  rccord  improved  in- 

cumbent  interdiction  plan  X  <—  X  ; 

5)  If  (  Z^5  -Zj^g<e  )  go  to  End; 

6)  Append  a  new  instance  of  cuts  (27)  and  SECs  (28)  to  DMAX^  ,  and 
attempt  to  solve  that  master  problem  to  obtain  the  conditionally  valid 
upper  bound  on  the  project  length,  Z^^^ ; 

/*  The  bound  is  valid  if  we  have  not  identified  the  optimal  solution  yet, 
and  the  bound’s  validity  is  moot  if  we  have.  */ 
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7)  If  (  DMAX^  is  infeasible  )  set  Zjj^  <—  and  go  to  End; 

/*  Above,  the  master  problem  could  be  infeasible  because  all  solutions 
have  been  eliminated  by  SECs.  In  this  case,  X*  must  be  optimal.  */ 


8)  If(Zl<Z,.)  setZ^.^z:,,; 


"max  ^  ^UB 


UB 


TK 

''max  ’ 


9)  If  ( Zy^  -Zj^g<e)  go  to  End; 

10)  Set  X  ■(—  X  +1  and  go  to  Subproblem; 

11)  End:  Print  (  X* ,  “is  an  e-optimal  solution  with  objective  value”,  Z^^  ); 

12)  Print  (  “The  provable  optimality  gap  is”  max  {^UB  ^LB^^]  )i 

13)  Halt; 


6  IMPLEMENTATION 

We  have  integrated  the  models  and  algorithm  described  above  with  an  off-the- 
shelf  project-management  product,  Microsoft  Project™  (“MS  Project”;  see  Microsoft 
2004),  to  manage  data  and  to  display  results.  We  have  implemented  the  algorithm  with 
the  GAMS  algebraic  modeling  system  (GAMS  2007a),  using  CPLEX  as  the  optimizer 
(GAMS  2007b).  A  custom  interface  written  in  VBA  (Microsoft  2003)  provides  the  user 
with  access  to  the  model  and  optimizer,  and  connects  MS  Project’s  functions  with 
GAMS. 

A  2.0  GHz  Dell  Inspiron  6000  computer  serves  as  our  computing  platform.  Each 
instance  of  MAXMIN  requires  less  than  20  minutes  to  generate  (via  VBA  and  GAMS), 
to  optimize  (via  CPEEX),  and  to  return  results  to  MS  Project  (via  GAMS  and  VBA). 
Each  subproblem  EMIN  comprises  about  200  binary  variables,  400  continuous  variables 
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and  1,100  constraints.  The  master  problem  DMAX^  comprises  about  1,200  binary  va¬ 
riables  and  1,100-1,600  constraints,  depending  on  the  number  of  iterations. 

7  APPLICATION  AND  INSIGHTS 

Using  MAXMIN,  we  find  the  best  interdiction  plan  for  a  single  set  of  input  pa¬ 
rameters,  and  recover  the  resulting  project  plan  used  by  the  proliferator  after  he  sees  that 
interdiction  plan.  We  have  found  instances  in  which  multiple  interdiction  plans  produce 
the  same  maximum  expedited  project  length.  A  set  of  such  interdiction  plans  can  be  pre¬ 
sented  to  policy-makers  for  evaluation  against  secondary  criteria. 

Using  the  scenario  from  Harney  et  al.  (2006)  that  has  unlimited  resources  for  the 
proliferator  and  no  interdictions,  the  proliferator  chooses  aerodynamic  enrichment  and 
completes  his  project  in  260  weeks,  i.e.,  in  a  little  over  five  years.  (Incidentally,  the  three 
enrichment  technologies  have  similar  completion  times  when  fully  crashed,  but  signifi¬ 
cantly  different  costs:  about  196  weeks  and  $108M  for  gas  centrifuge,  192  weeks  and 
$318M  for  gas  diffusion,  and  192  weeks  and  $25 8M  for  aerodynamic.)  Now,  suppose 
that  (a)  the  proliferator  plans  to  complete  his  project  as  quickly  as  possible  under  the  as¬ 
sumption  that  we  will  not  interdict  his  plan,  (b)  we,  as  interdictor,  optimally  interdict 
assuming  the  proliferator  will  not  notice  our  actions,  and  (c)  the  proliferator,  in  fact,  does 
not  notice.  (That  is,  the  proliferator  solves  EMIN(O)  to  obtain  (D,E),  and  we  solve 
DMAX(D,E) ,  and  do  not  have  to  worry  about  the  proliferator  adjusting  his  subsequent 
plans.)  This  is  an  optimistic  situation  for  us,  but  is  instructive  to  analyze  because  it  helps 
evaluate  the  importance  of  keeping  our  interdiction  plan  secret.  By  interdicting  the  two 
optimal  tasks,  we  can  extend  the  proliferator’s  project  to  356  weeks  (about  6.8  years). 
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which  amounts  to  a  37%  increase.  To  achieve  this  delay,  we  interdict  “cascade  loading” 
and  “acquisition  of  pumps  and  piping”  for  the  production  versions  of  the  enrichment 
equipment. 

MAXMIN  shows  that,  even  if  the  proliferator  is  aware  of  our  intention  to  inter¬ 
dict  his  project  and  which  tasks  we  will  delay,  the  best  he  can  do  is  to  complete  the 
project  in  348  weeks  (about  6.7  years).  This  is  still  a  34%  increase  over  the  length  of  the 
project  when  we  do  nothing.  This  significant  but  not  huge  increase  results  from  our  mod¬ 
est  assumptions  about  the  achievable  delays  from  interdictions.  Even  though  the 
proliferator  knows  how  the  project  will  be  interdicted  and  can  compensate,  and  even  if  he 
chooses  a  different  enrichment  technology  and  completely  re-allocates  his  monetary  re¬ 
sources,  he  can  only  save  8  weeks  of  the  project  length  we  achieve  by  interdicting  with 
complete  secrecy.  Thus,  we  have  discovered  real,  unavoidable  fragilities  in  his  project. 

We  have  also  evaluated  a  scenario  in  which  the  proliferator  purchases  HEU  in¬ 
stead  of  producing  it  himself  With  a  large  crashing  budget,  the  proliferator  now 
completes  the  uninterdicted  program  in  208  weeks,  but  requires  244  weeks  with  two  in¬ 
terdictions.  These  results  contrast  with  the  belief  that  some  people  may  have,  which  is 
that  possessing  HEEl  is  essentially  equivalent  to  possessing  a  nuclear  weapon.  It  is  true 
that  if  the  proliferator  produces  his  own  HEEI,  he  only  needs  about  260  -  192  =  68  weeks 
to  complete  a  weapon  once  the  HEEl  is  in  hand.  But,  those  68  weeks  are  preceded  by 
about  208  -  68  =  140  weeks  of  work  on  infrastructure  for  exploiting  that  HEU,  effort  that 
goes  on  in  parallel  with  its  production.  (The  proliferator’s  ability  to  fabricate  a  potent 
radiological  dispersion  device,  i.e.,  a  “dirty  bomb,”  would  pose  a  more  immediate  threat; 
see  Magill  et  al.  2007.) 
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Table  3  illustrates  the  results  of  running  MAXMIN  for  various  scenarios  involv¬ 
ing  from  zero  to  four  interdicted  tasks,  and  with  a  decision-and-expediting  budget  of 
either  $380  million  or  $480  million  for  the  proliferator.  We  modify  the  algorithm  slightly 
by  (a)  adding  an  iteration  limit  of  500,  and  (b)  replacing  the  absolute  optimality  tolerance 
of  s  with  a  relative  optimality  tolerance  of  5%  (that  is,  the  algorithm  terminate  if 
100%x(Z^^-Z,J/Z,^<5%). 

The  table  shows  that,  for  two  interdictions,  the  proliferator  can  make  some  modest 
use  of  an  increased  budget.  In  both  budget  scenarios,  the  final  optimality  gap  is  less  than 
1%,  and  we  see  that  the  proliferator  can  reduce  his  project-completion  time  by  about  ten 
weeks  if  he  has  an  extra  $100  million  at  his  disposal. 


Table  3.  MAXMIN  solves  DCPMI  for  the  case  study,  with  zero  to  four  interdictions  and 
two  different  decision-and-expediting  budgets  for  the  proliferator.  The  algorithm  uses  a 
5%  relative  optimality  tolerance,  but  is  limited  to  a  maximum  of  500  iterations.  For  each 
problem,  the  table  reports  the  objective  value  in  weeks  for  best  solution  found  Z^^,  the 
best  upper  bound  Z^g ,  the  relative  optimality  gap  (“relgap”)  established  in  the  last  itera¬ 
tion,  and  the  number  of  iterations. 


Number  of 
Interdictions 

Proliferator’ s  budget  =  $3  SOM 
^LB  ^UB  relgap  iter 

Proliferator’ s  budget  =  $480M 
^LB  ^UB  relgap  iter 

0 

260.00 

260.00 

0.0% 

1 

260.00 

260.00 

0.0% 

0 

1 

316.00 

316.00 

0.0% 

13 

312.00 

316.00 

1.3% 

24 

2 

350.25 

350.5 

0.1% 

54 

340.00 

340.12 

<0.1% 

5 

3 

352.00 

374.31 

6.3% 

500 

352.00 

364.12 

3.4% 

17 

4 

368.00 

386.5 

5.0% 

211 

368.00 

376.50 

2.3% 

488 

The  algorithm  achieves  an  optimality  gap  of  at  most  5%  for  all  scenarios  except 
the  one  with  three  interdictions  allowed  and  a  $380M  decision-and-expediting  budget.  In 
this  case,  it  terminates  at  500  iterations  with  a  6.3%  optimality  gap.  We  use  this  most- 
difficult  scenario  to  illustrate,  in  Figure  3,  how  MAXMIN  progresses  through  its  itera- 
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tions  when  faced  with  a  challenging  problem.  The  figure  displays  lower  and  bounds  on 
Z*,  as  well  as  the  individual  master-  and  subproblem-solution  values,  for  the  first  150 
iterations.  At  that  point,  the  optimality  gap  is  6.4%,  and  the  remaining  350  iterations  im¬ 
prove  only  the  upper  bound,  and  only  fractionally.  (The  final  optimality  gap  is  6.3%;  see 
Table  3.) 


Figure  3.  Progress  of  the  MAXMIN  algorithm  for  150  iterations,  given  three  interdictions  and 
a  decision-and-expediting  budget  of  $380  million  for  the  proliferator.  At  each  iteration,  the  low¬ 
er,  dashed  line  represents  the  subproblem  objective  value;  the  dashed  line  directly  above 
represents  global  lower  bound  set  by  the  incumbent  interdiction  plan;  the  solid  upper  line 

represents  the  local  upper  bound  (D,  E)  obtained  from  each  master-problem  solution;  and 

the  thicker  solid  line  represents  the  global  upper  bound. 


Three  Interdictions 


Iteration 


In  every  variation  of  the  case  study,  the  cascade-loading  task  in  each  of  the  alter¬ 
nate  technologies  is  the  most  susceptible  to  interdiction:  the  three  variants  of  this  task 
appear  in  every  incumbent  interdiction  plan  found  by  MAXMIN.  This  is  key  information 
for  a  policy-maker  or  military  planner. 
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8  CONCLUSIONS 

This  paper  has  presented  a  max-min  model,  denoted  DCPMI,  for  the  optimal  in¬ 
terdiction  of  a  nuclear-weapons  project.  “Optimaf’  implies  that  the  project  is  maximally 
delayed  given  limited  interdiction  resources.  Interdictions  might  involve  military  strikes, 
embargoes  on  key  materials,  or  sabotage  of  facilities. 

At  its  inner  level,  DCPMI  incorporates  a  detailed  project-management  model, 
specifically,  a  generalized  decision-CPM  model.  This  model  shows  the  nuclear-weapons 
developer,  or  “proliferator,”  how  to  complete  his  weapons  project  as  quickly  as  possible 
by  using  limited  resources  to  complete  and  expedite  project  tasks,  and  by  using  alternate 
technologies  to  achieve  certain  intermediate  goals.  The  outer  level  of  DCPMI  uses  inter¬ 
diction  resources  to  delay  the  project’s  tasks,  with  the  goal  being  to  maximize  the 
proliferator’ s  minimum  project-completion  time.  We  develop  a  special  decomposition 
algorithm  to  solve  DCPMI  for  an  optimal  or  near-optimal  interdiction  plan.  The  algo¬ 
rithm  extends  Benders  decomposition  in  that  (a)  its  subproblems  are  difficult  integer 
programs,  not  linear  programs,  and  (b)  it  uses  a  nominally  non-convergent  master- 
problem  bound,  which  is  augmented  with  solution-elimination  constraints  to  ensure  con¬ 
vergence. 

We  have  developed  a  complete  decision-support  system  that  implements  DCPMI 
and  its  solution  algorithm  using  standard  software.  Computational  results  from  a  case 
study  show  that  optimal  or  near-optimal  solutions  can  be  found  for  a  large-scale,  high- 
fidelity  scenario  in  about  20  minutes  on  a  personal  computer.  Thus,  “what-if’  exercises 
can  be  conducted  quickly. 
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DCPMI  is  flexible  and  can  easily  adapt  to  a  number  of  modeling  nuances  not  cov¬ 
ered  in  the  paper.  For  instance,  it  is  easy  to  add  constraints  to  limit  the  political, 
environmental  or  economic  impact  of  candidate  interdiction  plans  (Reed  1994),  and 
DCPMI  can  easily  incorporate  multiple  types  of  interdiction  resource  and/or  interdiction 
actions  that  affect  multiple  tasks.  DCPMI  can  also  be  adjusted  to  preferentially  interdict 
active  or  near-term  tasks,  better  to  achieve  immediate  or  near-term  results.  This  would 
also  reduce  the  time  that  the  proliferator  has  to  detect  interdictions  and  to  make  recovery 
plans.  The  model  can  also  be  modified  to  analyze  a  partially  completed  project,  and  even 
to  allow  interdictions  that  set  back  such  a  project  by  “de-completing”  certain  tasks.  For 
instance,  a  completed  enrichment  facility  could  be  destroyed  by  a  military  strike,  or  by 
sabotage,  and  would  need  to  be  rebuilt;  see  Skroch  (2004). 
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